- Company Name
- SOLENT SAS
- Job Title
- Architecte IT / Cybersécurité - Ferroviaire
- Job Description
-
**Job Title**
IT & Cybersecurity Architect – Railway Systems
**Role Summary**
Design, document, and evolve IT and cybersecurity architectures for a railway signalling system provider, ensuring performance, compliance, and resilience across complex Linux/Windows and virtualized environments.
**Expectations**
- Build scalable, secure architectures that meet industry performance and regulatory standards.
- Produce detailed technical architecture and security deliverables (documents, flow matrices, network diagrams).
- Lead or supervise implementation of security controls (segmentation, monitoring, hardening, PKI, IAM).
- Deploy and configure heterogeneous infrastructure including Linux/Windows servers, VMware ESXi, SQL Server, firewalls, and network devices.
- Collaborate with Systems, Network, Security, and Project teams to maintain technical consistency and resilience.
- Maintain continuous technical and regulatory knowledge, and enhance architectural standards.
**Key Responsibilities**
1. Develop and evolve IT and cybersecurity architecture for railway signalling projects.
2. Author architecture and security documentation, including technical specifications, flow matrices, and network diagrams.
3. Design and dimension network flow matrices and infrastructure sizing.
4. Implement security solutions: segmentation, supervision, hardening, PKI, IAM, SIEM, EPP, Bastion.
5. Deploy complex infrastructures on Linux (RHEL, Debian) and Windows Server 2019 using VMware ESXi.
6. Coordinate with Systems, Network, Security, and Project teams to ensure coherence and resilience.
7. Conduct continuous technology and regulatory monitoring.
8. Contribute to improvement of architectural standards and best practices.
9. Support or lead the setup of industrial railway protocols (S7, OPC-UA, CBTC) as required.
**Required Skills**
- Minimum 3 years of systems and network administration experience.
- Proven architecture experience in enterprise environments.
- Proficiency with Linux (RHEL, Debian) and Windows Server 2019.
- VMware ESXi virtualization skills.
- Network design: firewalls, gateways, switches, DMZs, TCP/IP, HA, 802.1q.
- Cybersecurity: PKI, Active Directory, SIEM, EPP, Bastion, segmentation, monitoring, hardening, IAM.
- Database: Microsoft SQL Server.
- Documentation tools: IBM ClearQuest, IBM Doors, Visio.
- Knowledge of technical architecture methodology (V‑model).
- Strong written and verbal communication in professional English.
- Ability to create technical and security architecture documents, matrices, and diagrams.
**Required Education & Certifications**
- Bachelor’s or Master’s degree (or equivalent) in Systems, Networks, Cybersecurity, or related engineering field.
- Professional certifications are an advantage (e.g., CCNA/CCNP, Cisco Secure, Microsoft Certified: Azure Fundamentals, VMware VCP, CISSP, CISM, CompTIA Security+), but not mandatory.
---